🚨 A filename overflow in the D-Link DIR-505 TFTP upload path can be chained into…
This is a dev post classified by AGK Intelligence as Security (a tool drop), kept by the Dev Radar because it carries real work, not commentary.
🚨 A filename overflow in the D-Link DIR-505 TFTP upload path can be chained into unauthenticated remote code execution as root PoC: https://github.com/Walnut1337/DIR-505_filename_rce The issue affects the DIR-505 A1 running firmware 1.10B02. An attacker-controlled TFTP filename is copied into fixed-size stack buffers, allowing control of the return address and execution of a ROP chain that ultimately calls system(). D-Link DIR-505 | Pre-auth RCE CVSS: 9.8 Critical Affected: DIR-505 A1 firmware 1.10B02 Impact: Unauthenticated remote code execution as root Status: Verified end-to-end against
Posted by Dark Web Informer (259.2k followers) 1 h ago · 3 likes · 3.6k views · view the original post on X. Kept by the Dev Radar as Security. Tools mentioned: dir-505_filename_rce.
More dev work like this
- 🚨 A PackageKit race condition can let a local unprivileged user gain root access on… — @DarkWebInformer
- 🚨 A Samba printing flaw can turn a malicious print job name into remote code execution;… — @DarkWebInformer
- 🚨 A Linux kernel vhost flaw can let a local attacker cross virtualization boundaries… — @DarkWebInformer
- The fastest way to shrink a vulnerability backlog is to stop it from filling up in the… — @chainguard_dev
- Resend is a launch partner in @trufflesec's secrets revocation program. Automatic secret… — @resend
- Vulnerabilities are easy to count. Meaningful risk is harder to measure. — @RedHat
- My new Offensive Security model, BaronLLM v3, is ready! 🔥 In this version, I used… — @AlicanKiraz0
- Join us tomorrow for a new episode of Builders Room! — @turnkeyhq
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.6k posts from 5k X accounts over the last 21 days, 9.3k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-11-05 00:12 UTC. Full method.